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CLAIMS 

1 1. A method for diagnosis of a system made up of a 

2 plurality of interlinked modules, comprising: 

3 receiving an alarm from the system indicative of a 

4 fault in one of the modules; 

5 responsive to the alarm, constructing a causal 

6 network associating the fault with malfunctions in one or 

7 more of the modules that may have led to the fault and 

8 relating a conditional probability of the fault to 

9 respective probabilities of the malfunctions; 

10 based on the alarm and the causal network, updating 

11 at least one of the probabilities of the malfunctions; 

12 and 

13 proposing a diagnosis of the alarm responsive to the 

14 updated probabilities. 

1 2. A method according to claim 1, wherein receiving the 

2 alarm comprises gathering event reports from the 

3 plurality of the modules in the system, and extracting 

4 the alarm from the event reports, 

1 3. A method according to claim 2, wherein gathering the 

2 event reports comprises receiving a report of a change in 

3 configuration of the system, and wherein constructing the 

4 causal network comprises constructing the causal network 

5 based on the changed configuration. 

1 4. A method according to claim 3, wherein constructing 

2 the causal network based on the changed configuration 

3 comprises maintaining a database in which the 

4 configuration is recorded, and updating the database 

5 responsive to the report of the change in the 
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6 conf iguration, for use in constructing the causal 

7 network. 

1 5. A method according to claim 2, wherein extracting 

2 the alarm comprises extracting a sequence of alarms 

3 occurring at mutually proximal times, including the alarm 

4 indicative of the fault in the one of the modules , and 

5 wherein updating the at least one of the probabilities 

6 comprises processing the sequence of the alarms so as to 

7 update the probabilities. 

1 6. A method according to claim 5, wherein extracting 

2 the sequence of the alarms comprises defining respective 

3 lifetimes for the alarms, responsive to expected delays 

4 in receiving the alarms from the system, and selecting 

5 the alarms to extract from the sequence responsive to the 

6 respective lifetimes. 

1 7. A method according to claim 6, wherein selecting the 

2 alarms to extract comprises selecting the alarms that 

3 occurred within their respective lifetimes of a time of 

4 occurrence of the alarm indicative of the fault in the 

5 one of the modules responsive to which the causal network 

6 is constructed. 

1 8. A method according to claim 5, wherein constructing 

2 the causal network comprises defining an expected alarm 

3 that would be caused by one of the malfunctions in the 

4 one or more of the modules, and wherein processing the 

5 sequence of the alarms comprises updating the 

6 probabilities responsive to an occurrence of the expected 

7 alarm in the extracted sequence of alarms. 

1 9. A method according to claim 5, wherein constructing 

2 the causal network comprises defining a template 
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3 comprising a group of nodes in the network corresponding 

4 to a category of the modules in the system and an 

5 expected alarm that would be caused by one of the 

6 malfunctions in the modules in the category, and 

7 instantiating the template in the causal network 

8 responsive to an occurrence of the expected alarm in the 

9 extracted sequence of alarms. 

1 10, A method according to claim 1, wherein the plurality 

2 of interlinked modules comprises multiple instances of a 

3 given one of the modules interlinked in a regular 

4 pattern, and wherein constructing the causal network 

5 comprises defining a template comprising a group of nodes 

6 in the network corresponding to the given one of the 

7 modules, and instantiating the template with respect to 

8 one or more of the modules responsive to the alarm. 

1 11. A method according to claim 10, wherein defining the 

2 template comprises identifying an expected alarm that 

3 would be caused by one of the malfunctions in one of the 

4 instances of the given one of the modules, and wherein 

5 instantiating the template comprises adding an instance 

6 of the template to the network responsive to an 

7 occurrence of the expected alarm. 

1 12. A method according to claim 1, wherein constructing 

2 the causal network comprises identifying a local fault 

3 condition in the one of the modules in which the fault 

4 occurred, and responsive to the local fault condition, 

5 linking the fault in the causal network to one of the 

6 malfunctions occurring in the one of the modules. 

1 13. A method according to claim 1, wherein constructing 

2 the causal network comprises identifying a first fault 
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3 condition occurring in a first one of the modules due to 

4 a connection with a second one of the modules in the 

5 system, and responsive to the first fault condition, 

6 linking the fault in the causal network with a second 

7 fault condition occurring in the second one of the 

8 modules. 

1 14, A method according to claim 13, wherein linking the 

2 fault comprises determining that a possible cause of the 

3 second fault condition is due a further connection 

4 between the second one of the modules and a third one of 

5 the modules in the system, and responsive to the further 

6 connection, linking the fault in the causal network with 

7 a third fault condition occurring in the third one of the 

8 modules. 

1 15. A method according to claim 1, wherein constructing 

2 the causal network comprises adding to the causal network 

3 multiple occurrences of one of the malfunctions 

4 responsive to the respective probabilities of the 

5 malfunctions, and linking the fault in the causal network 

6 to the multiple occurrences. 

1 16. A method according to claim 15, wherein linking the 

2 fault to the multiple occurrences comprises determining 

3 one or more fault conditions that are caused by each of 

4 the occurrences, and linking at least some of the fault 

5 conditions to the fault. 

1 17. A method according to claim 1, wherein updating the 

2 at least one of the probabilities of the malfunctions 

3 comprises assessing a mean time between failures of the 

4 one or more of the modules. 
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1 18. A method according to claim 1, wherein the 

2 probabilities of the malfunctions are defined in terms of 

3 a probability distribution having a mean and a moment, 

4 and wherein updating the at least one of the 

5 probabilities comprises reassessing the mean and the 

6 moment of the distribution. 

1 19. A method according to claim 18, wherein the 

2 probability distribution comprises a failure rate 

3 distribution, and wherein reassessing the mean and the 

4 moment comprises updating the failure rate distribution 

5 using a Bayesian Reliability Theory model. 

1 20. A method according to claim 1, wherein proposing the 

2 diagnosis comprises comparing one or more of the updated 

3 probabilities to a predetermined threshold, and invoking 

4 diagnostic action when the one of the probabilities 

5 exceeds the threshold. 

1 21. A method according to claim 20, wherein invoking the 

2 diagnostic action comprises notifying a user of the 

3 system of the diagnosis. 

1 22. A method according to claim 21, wherein notifying 

2 the user comprises providing an explanation of the 

3 diagnosis based on the causal network. 

1 23. A method according to claim 20, wherein invoking the 

2 diagnostic action comprises performing a diagnostic test 

3 to verify the malfunctions, wherein the test is selected 

4 responsive to the one of the probabilities exceeding the 

5 threshold. 

1 24. A method according to claim 23, and comprising 

2 modifying the causal network responsive to a result of 

3 the diagnostic test. 
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1 25. A method for diagnosis of a system made up of a 

2 plurality of interlinked modules, comprising: 

3 constructing a causal network associating a fault in 

4 one of the modules with malfunctions in two or more of 

5 the modules that may have led to the fault and relating a 

6 conditional probability of the fault to respective 

7 probability distributions of the malfunctions; 

8 responsive to an alarm from the system indicative of 

9 the fault, updating the probability distributions of the 

10 malfunctions; and 

11 proposing a diagnosis of the alarm responsive to the 

12 updated probabilities. 

1 26. A method according to claim 25, wherein updating the 

2 probability distributions comprises assessing a mean time 

3 between failures of the two or more of the modules. 

1 27. A method according to claim 25, wherein the 

2 probability distributions have a mean and a moment, and 

3 wherein updating the probability distributions comprises 

4 reassessing the mean and the moment of the distribution. 

1 28. A method according to claim 27, wherein the 

2 probability distributions comprise failure rate 

3 distributions, and wherein reassessing the mean and the 

4 moment comprises updating the failure rate distributions 

5 using a Bayesian Reliability Theory model. 

1 29. A method according to claim 25, wherein the two or 

2 more of the modules comprise the one of the modules in 

3 which the fault occurred, and wherein constructing the 

4 causal network comprises identifying a local fault 

5 condition in the one of the modules, and responsive to 

6 the local fault condition, linking the fault in the 
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7 causal network to one of the malfunctions occurring in 

8 the one of the modules. 

1 30. A method according to claim 25 , wherein the two or 

2 more of the modules comprise first and second modules, 

3 and wherein constructing the causal network comprises 

4 identifying a first fault condition occurring in the 

5 first module due to a connection in the system with the 

6 second module, and responsive to the first fault 

7 condition, linking the fault in the causal network with a 

8 second fault condition occurring in the second module. 

1 31. A method according to claim 30, wherein the two or 

2 more of the modules comprise a third module, and wherein 

3 linking the fault comprises determining that a possible 

4 cause of the second fault condition is due a further 

5 connection in the system between the second module and 

6 the third module, and responsive to the further 

7 connection, linking the fault in the causal network with 

8 a third fault condition occurring in the third module. 

1 32. Apparatus for diagnosis of a system made up of a 

2 plurality of interlinked modules, the apparatus 

3 comprising a diagnostic processor, which is coupled to 

4 receive an alarm from the system indicative of a fault in 

5 one of the modules and which is arranged, responsive to 

6 the alarm, to construct a causal network associating the 

7 fault with malfunctions in one or more of the modules 

8 that may have led to the fault and relating a conditional 

9 probability of the fault to respective probabilities of 

10 the malfunctions, and based on the alarm and the causal 

11 network, to update at least one of the probabilities of 

12 the malfunctions so as to propose a diagnosis of the 

13 alarm responsive to the updated probabilities. 
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1 33, Apparatus according to claim 32, wherein the 

2 processor is linked to receive event reports from the 

3 plurality of the modules in the system, and to extract 

4 the alarm from the event reports. 

1 34. Apparatus according to claim 33, wherein the event 

2 reports comprise a report of a change in configuration of 

3 the system, and wherein the processor is arranged to 

4 construct the causal network based on the changed 

5 configuration. 

1 35. Apparatus according to claim 34, and comprising a 

2 memory, containing a database in which the configuration 

3 is recorded, and wherein the processor is coupled to 

4 update the database responsive to the report of the 

5 change in the configuration, for use in constructing the 

6 causal network. 

1 36. Apparatus according to claim 33, wherein the 

2 processor is coupled to extract a sequence of alarms 

3 occurring at mutually proximal times, including the alarm 

4 indicative of the fault in the one of the modules, and to 

5 process the sequence of the alarms so as to update the 

6 probabilities. 

1 37. Apparatus according to claim 36, wherein respective 

2 lifetimes are defined for the alarms, responsive to 

3 expected delays in receiving the alarms from the system, 

4 and wherein the processor is arranged to select the 

5 alarms to extract from the sequence responsive to the 

6 respective lifetimes. 

1 38. Apparatus according to claim 37, wherein the 

2 processor is arranged to select the alarms that occurred 

3 within their respective lifetimes of a time of occurrence 
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4 of the alarm indicative of the fault in the one of the 

5 modules responsive to which the causal network is 

6 constructed. 

1 39. Apparatus according to claim 36, wherein in 

2 constructing the causal network, the processor is 

3 arranged to define an expected alarm that would be caused 

4 by one of the malfunctions in the one or more of the 

5 modules, and wherein the processor is further arranged to 

6 update the probabilities responsive to an occurrence of 

7 the expected alarm in the extracted sequence of alarms. 

1 40. Apparatus according to claim 36, wherein a template 

2 is defined comprising a group of nodes in the network 

3 corresponding to a category of the modules in the system 

4 and an expected alarm that would be caused by one of the 

5 malfunctions in the modules in the category, and wherein 

6 the processor is arranged to instantiate the template in 

7 the causal network responsive to an occurrence of the 

8 expected alarm in the extracted sequence of alarms. 

1 41. Apparatus according to claim 32, wherein the 

2 plurality of interlinked modules comprises multiple 

3 instances of a given one of the modules interlinked in a 

4 regular pattern, and wherein a template is defined 

5 comprising a group of nodes in the network corresponding 

6 to the given one of the modules, and wherein the 

7 processor is arranged to instantiate the template with 

8 respect to one or more of the modules responsive to the 

9 alarm. 

1 42. Apparatus according to claim 41, wherein the 

2 template comprises an expected alarm that would be caused 

3 by one of the malfunctions in one of the instances of the 
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4 given one of the modules, and wherein the processor is 

5 arranged to instantiate the template by adding an 

6 instance of the template to the network responsive to an 

7 occurrence of the expected alarm. 

1 43. Apparatus according to claim 32, wherein the 

2 processor is arranged to identify a local fault condition 

3 in the one of the modules in which the fault occurred, 

4 and responsive to the local fault condition, to link the 

5 fault in the causal network to one of the malfunctions 

6 occurring in the one of the modules. 

1 44. Apparatus according to claim 32, wherein the 

2 processor is arranged to identify a first fault condition 

3 occurring in a first one of the modules due to a 

4 connection with a second one of the modules in the 

5 system, and responsive to the first fault condition, to 

6 link the fault in the causal network with a second fault 

7 condition occurring in the second one of the modules. 

1 45. Apparatus according to claim 44, wherein the 

2 processor is arranged to determine that a possible cause 

3 of the second fault condition is due a further connection 

4 between the second one of the modules and a third one of 

5 the modules in the system, and responsive to the further 

6 connection, to link the fault in the causal network with 

7 a third fault condition occurring in the third one of the 

8 modules. 

1 46. Apparatus according to claim 32, wherein the 

2 processor is arranged to add to the causal network 

3 multiple occurrences of one of the malfunctions 

4 responsive to the respective probabilities of the 
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5 malfunctions , and to link the fault in the causal network 

6 to the multiple occurrences. 

1 47. Apparatus according to claim 46, wherein the 

2 processor is arranged to determine one or more fault 

3 conditions that are caused by each of the occurrences, 

4 and to link at least some of the fault conditions to the 

5 fault. 

1 48. Apparatus according to claim 32, wherein the at 

2 least one of the probabilities of the malfunctions is 

3 expressed as a mean time between failures of the one or 

4 more of the modules. 

1 49. Apparatus according to claim 32, wherein the 

2 probabilities of the malfunctions are defined in terms of 

3 a probability distribution having a mean and a moment, 

4 and wherein the processor is arranged to update the mean 

5 and the moment of the distribution. 

1 50. Apparatus according to claim 49, wherein the 

2 probability distribution comprises a failure rate 

3 distribution, and wherein the processor is arranged to 

4 update the failure rate distribution using a Bayesian 

5 Reliability Theory model. 

1 51. Apparatus according to claim 32, wherein the 

2 processor is arranged to compare one or more of the 

3 updated probabilities to a predetermined threshold, and 

4 to invoke diagnostic action when the one of the 

5 probabilities exceeds the threshold. 

1 52. Apparatus according to claim 51, and comprising a 

2 user interface, wherein the processor is coupled to 

3 notify a user of the system of the diagnosis via the user 

4 interface. 
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53. Apparatus according to claim 52, wherein the 
processor is arranged to provide via the user interface 
an explanation of the diagnosis based on the causal 
network. 

54. Apparatus according to claim 51, wherein the 
diagnostic action comprises a diagnostic test that is 
performed to verify the malfunctions, wherein the test is 
selected responsive to the one of the probabilities 
exceeding the threshold. 

55. Apparatus according to claim 54, wherein the 
processor is arranged to modify the causal network 
responsive to a result of the diagnostic test. 

56. Apparatus for diagnosis of a system made up of a 
plurality of interlinked modules, the apparatus 
comprising a diagnostic processor, which is arranged to 
construct a causal network associating a fault in one of 
the modules with malfunctions in two or more of the 
modules that may have led to the fault and relating a 
conditional probability of the fault to respective 
probability distributions of the malfunctions, and 
responsive to an alarm from the system indicative of the 
fault, to update the probability distributions of the 
malfunctions so as to propose a diagnosis of the alarm 
responsive to the updated probabilities. 

57. Apparatus according to claim 56, wherein the 
probability distributions are indicative of a mean time 
between failures of the two or more of the modules. 

58. Apparatus according to claim 56, wherein the 
probability distributions have a mean and a moment, and 
wherein the processor is arranged to reassess the mean 
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4 and the moment of the distribution responsive to the 

5 alarm. 

1 59. Apparatus according to claim 58, wherein the 

2 probability distributions comprise failure rate 

3 distributions , and wherein the processor is arranged to 

4 update the failure rate distributions using a Bayesian 

5 Reliability Theory model. 

1 60. Apparatus according to claim 56, wherein the two or 

2 more of the modules comprise the one of the modules in 

3 which the fault occurred, and wherein the processor is 

4 arranged to identify a local fault condition in the one 

5 of the modules, and responsive to the local fault 

6 condition, to link the fault in the causal network to one 

7 of the malfunctions occurring in the one of the modules. 

1 61. Apparatus according to claim 56, wherein the two or 

2 more of the modules comprise first and second modules, 

3 and wherein the processor is arranged to identify a first 

4 fault condition occurring in the first module due to a 

5 connection in the system with the second module, and 

6 responsive to the first fault condition, to link the 

7 fault in the causal network with a second fault condition 

8 occurring in the second module. 

1 62. Apparatus according to claim 61, wherein the two or 

2 more of the modules comprise a third module, and wherein 

3 the processor is arranged to determine that a possible 

4 cause of the second fault condition is due a further 

5 connection in the system between the second module and 

6 the third module, and responsive to the further 

7 connection, to link the fault in the causal network with 

8 a third fault condition occurring in the third module. 
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1 63. A computer software product for diagnosis of a 

2 system made up of a plurality of interlinked modules, the 

3 product comprising a computer-readable medium in which 

4 program instructions are stored, which instructions, when 

5 read by a computer, cause the computer to receive an 

6 alarm from the system indicative of a fault in one of the 

7 modules and, responsive to the alarm, to construct a 

8 causal network associating the fault with malfunctions in 

9 one or more of the modules that may have led to the fault 

10 and relating a conditional probability of the fault to 

11 respective probabilities of the malfunctions, and based 

12 on the alarm and the causal network, to update at least 

13 one of the probabilities of the malfunctions so as to 

14 propose a diagnosis of the alarm responsive to the 

15 updated probabilities. 

1 64. A product according to claim 63, wherein the 

2 instructions cause the computer to receive event reports 

3 from the plurality of the modules in the system, and to 

4 extract the alarm from the event reports. 

1 65. A product according to claim 64, wherein the event 

2 reports comprise a report of a change in configuration of 

3 the system, and wherein the instructions cause the 

4 computer to construct the causal network based on the 

5 changed configuration. 

1 66. A product according to claim 65, wherein the 

2 instructions cause the computer, responsive to the report 

3 of the change in the configuration, to update a database 

4 in which the configuration is recorded, for use in 

5 constructing the causal network. 
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1 67. A product according to claim 64, wherein the 

2 instructions cause the computer to extract a sequence of 

3 alarms occurring at mutually proximal times, including 

4 the alarm indicative of the fault in the one of the 

5 modules, and to process the sequence of the alarms so as 

6 to update the probabilities. 

1 68. A product according to claim 67, wherein respective 

2 lifetimes are defined for the alarms, responsive to 

3 expected delays in receiving the alarms from the system, 

4 and wherein the instructions cause the computer to select 

5 the alarms to extract from the sequence responsive to the 

6 respective lifetimes. 

1 69. A product according to claim 68, wherein the 

2 instructions cause the computer to select the alarms that 

3 occurred within their respective lifetimes of a time of 

4 occurrence of the alarm indicative of the fault in the 

5 one of the modules responsive to which the causal network 

6 is constructed. 

1 70. A product according to claim 67, wherein the 

2 instructions cause the computer, in constructing the 

3 causal network, to define an expected alarm that would be 

4 caused by one of the malfunctions in the one or more of 

5 the modules, and to update the probabilities responsive 

6 to an occurrence of the expected alarm in the extracted 

7 sequence of alarms, 

1 71. A product according to claim 67, wherein a template 

2 is defined comprising a group of nodes in the network 

3 corresponding to a category of the modules in the system 

4 and an expected alarm that would be caused by one of the 

5 malfunctions in the modules in the category, and wherein 
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6 the instructions cause the computer to instantiate the 

7 template in the causal network responsive to an 

8 occurrence of the expected alarm in the extracted 

9 sequence of alarms. 

1 72. A product according to claim 63, wherein the 

2 plurality of interlinked modules comprises multiple 

3 instances of a given one of the modules interlinked in a 

4 regular pattern, and wherein a template is defined 

5 comprising a group of nodes in the network corresponding 

6 to the given one of the modules, and wherein the 

7 instructions cause the computer to instantiate the 

8 template with respect to one or more of the modules 

9 responsive to the alarm. 

1 73, A product according to claim 72, wherein the 

2 template comprises an expected alarm that would be caused 

3 by one of the malfunctions in one of the instances of the 

4 given one of the modules, and wherein the instructions 

5 cause the computer to instantiate the template by adding 

6 an instance of the template to the network responsive to 

7 an occurrence of the expected alarm. 

1 74. A product according to claim 63, wherein the 

2 instructions cause the computer to identify a local fault 

3 condition in the one of the modules in which the fault 

4 occurred, and responsive to the local fault condition, to 

5 link the fault in the causal network to one of the 

6 malfunctions occurring in the one of the modules. 

1 75. A product according to claim 63, wherein the 

2 instructions cause the computer to identify a first fault 

3 condition occurring in a first one of the modules due to 

4 a connection with a second one of the modules in the 
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5 system, and responsive to the first fault condition, to 

6 link the fault in the causal network with a second fault 

7 condition occurring in the second one of the modules. 

1 76. A product according to claim 75, wherein the 

2 instructions cause the computer to determine that a 

3 possible cause of the second fault condition is due a 

4 further connection between the second one of the modules 

5 and a third one of the modules in the system, and 

6 responsive to the further connection, to link the fault 

7 in the causal network with a third fault condition 

8 occurring in the third one of the modules. 

1 77. A product according to claim 63, wherein the 

2 instructions cause the computer to add to the causal 

3 network multiple occurrences of one of the malfunctions 

4 responsive to the respective probabilities of the 

5 malfunctions, and to link the fault in the causal network 

6 to the multiple occurrences. 

1 78, A product according to claim 77, wherein the 

2 instructions cause the computer to determine one or more 

3 fault conditions that are caused by each of the 

4 occurrences, and to link at least some of the fault 

5 conditions to the fault. 

1 79. A product according to claim 63, wherein the at 

2 least one of the probabilities of the malfunctions is 

3 expressed as a mean time between failures of the one or 

4 more of the modules. 

1 80. A product according to claim 63, wherein the 

2 probabilities of the malfunctions are defined in terms of 

3 a probability distribution having a mean and a moment, 
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4 and wherein the instructions cause the computer to update 

5 the mean and the moment of the distribution. 

1 81 . A product according to claim 80, wherein the 

2 probability distribution comprises a failure rate 

3 distribution, and wherein the instructions cause the 

4 computer to update the failure rate distribution using a 

5 Bayesian Reliability Theory model. 

1 82. A product according to claim 63, wherein the 

2 instructions cause the computer to compare one or more of 

3 the updated probabilities to a predetermined threshold, 

4 and to invoke diagnostic action when the one of the 

5 probabilities exceeds the threshold. 

1 83. A product according to claim 82, and wherein the 

2 instructions cause the computer to notify a user of the 

3 system of the diagnosis. 

1 84 . A product according to claim 83, wherein the 

2 instructions cause the computer to provide to the user an 

3 explanation of the diagnosis based on the causal network. 

1 85 . A product according to claim 82, wherein the 

2 diagnostic action comprises a diagnostic test that is 

3 performed to verify the malfunctions, wherein the test is 

4 selected responsive to the one of the probabilities 

5 exceeding the threshold. 

1 8 6. A product according to claim 85, wherein the 

2 instructions cause the computer to modify the causal 

3 network responsive to a result of the diagnostic test. 

1 87. A product for diagnosis of a system made up of a 

2 plurality of interlinked modules, the product comprising 

3 a computer-readable medium in which program instructions 

4 are stored, which instructions, when read by a computer, 
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5 cause the computer to construct a causal network 

6 associating a fault in one of the modules with 

7 malfunctions in two or more of the modules that may have 

8 led to the fault and relating a conditional probability 

9 of the fault to respective probability distributions of 

10 the malfunctions, and responsive to an alarm from the 

11 system indicative of the fault, to update the probability 

12 distributions of the malfunctions so as to propose a 

13 diagnosis of the alarm responsive to the updated 

14 probabilities. 

1 88. A product according to claim 87, wherein the 

2 probability distributions are indicative of a mean time 

3 between failures of the two or more of the modules. 

1 89, A product according to claim 87, wherein the 

2 probability distributions have a mean and a moment, and 

3 wherein the instructions cause the computer to reassess 

4 the mean and the moment of the distribution responsive to 

5 the alarm, 

1 90. A product according to claim 89, wherein the 

2 probability distributions comprise failure rate 

3 distributions, and wherein the instructions cause the 

4 computer to update the failure rate distributions using a 

5 Bayesian Reliability Theory model. 

1 91. A product according to claim 87, wherein the two or 

2 more of the modules comprise the one of the modules in 

3 which the fault occurred, and wherein the instructions 

4 cause the computer to identify a local fault condition in 

5 the one of the modules, and responsive to the local fault 

6 condition, to link the fault in the causal network to one 

7 of the malfunctions occurring in the one of the modules. 
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1 92. A product according to claim 87, wherein the two or 

2 more of the modules comprise first and second modules, 

3 and wherein the instructions cause the computer to 

4 identify a first fault condition occurring in the first 

5 module due to a connection in the system with the second 

6 module, and responsive to the first fault condition, to 

7 link the fault in the causal network with a second fault 

8 condition occurring in the second module. 

1 93. A product according to claim 87, wherein the two or 

2 more of the modules comprise a third module, and wherein 

3 the instructions cause the computer to determine that a 

4 possible cause of the second fault condition is due a 

5 further connection in the system between the second 

6 module and the third module, and responsive to the 

7 further connection, to link the fault in the causal 

8 network with a third fault condition occurring in the 

9 third module. 
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